Re: Problem with Group Policies

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 03/11/04 

Date: Thu, 11 Mar 2004 10:25:02 -0700

You can not configure Account Policies from a Site linked GPO and have them
apply to ALL domains in the forest. The ONLY location to configure Domain
Account Policies is at the GPO linked to the domain, in each domain.

Also, it is usually not recommended to configure Site GPOs, except for rare
and unique instances. 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Tony F" <anonymous@discussions.microsoft.com> wrote in message
news:12D92D13-D449-4B32-8DF3-0528028CF249@microsoft.com...
> Hi There,
>
> I was wondering if anybody out there could help me. I am having a problem
with some settings not being applied from a Default Domain Policy. I have 4
sites and 4 Domains in my Active Directory that are seperated by a WAN link.
I have created a Default Domain Policy at the root Domain and have applied
this policy via the AD Sites and Services to the other 3 Domains 1 level
down the tree. I have clicked the "No Overide" option to prevent the policy
from being overwritten further down the tree. Whats happening is that some
of the settings in the Policy like the Warning message before logging on to
a domain is being applied but the Account Policies like Password settings
are not. Instead the computers on the domains are picking up the default
settings for the domain they are on. They are not picking up the settings
set in the root domain. Can anyone suggest what i need to do to get these to
work from the top level.
>
> Kind Regards..
>
> T

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO not picking up computer settings
    ... to the domain container with the password/account settings you want. ... for password/account settings and from what GPO. ... buying any of the highly rated AD or Group Policy books you see at Amazon or ... I have changed all the passwords back to what they were so users are now ...
    (microsoft.public.windows.server.security)
  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: IE Maintenance Group Policy Settings Issue
    ... If you configure a GPO to set the proxy to blank, ... be identified as a change to the policy and it will be re-applied to the ... This would be a GPO change and the settings ...
    (microsoft.public.win2000.group_policy)